Privacy Policy

Scope and who we are

CX Connected Existence (“CX,” “we,” “us,” or “our”) is a personal workspace that brings information from services you choose to connect into one working context. This Privacy Policy applies to the CX website, account, workspace, connected-service onboarding, and related support.

It does not govern Google, Microsoft, Stripe, or another third party's own products. Those providers process information under their own terms and privacy notices.

Information we collect

Account and authentication information

We process your name, email address, email-verification status, and a password-derived credential when you register with email. If you use a social sign-in, we receive identity information and authorization tokens from that provider. We also keep session, device, IP address, user-agent, and rate-limit information needed to authenticate and protect accounts.

Connected email and calendar information

When you authorize Google or Microsoft, we receive your provider account identifier, display name or email, approved scopes, connection status, and access and refresh credentials. CX currently synchronizes read-only mail details such as subject, short preview, sender and recipient names and addresses, timestamps, thread identifiers, labels or folders, and read or draft status. It does not currently synchronize full message bodies.

For calendars, CX currently synchronizes event titles, start and end times or dates, time zones, recurrence details, status, and technical provider identifiers. Initial calendar synchronization is generally limited to a window beginning about three months in the past and ending about eighteen months in the future. Initial Gmail synchronization is generally limited to the prior ninety days.

Workspace content and requests

We process content you create or submit, including tasks, workspace settings, support messages, prompts, selected objects, and connected relationships. This can include financial or portfolio information that you choose to enter or connect as those capabilities are offered.

Billing and service information

Stripe processes payment details. CX receives and stores limited billing records such as Stripe customer and subscription identifiers, plan, subscription status, renewal dates, and cancellation status; CX does not store full payment-card numbers. We also process operational events, error and synchronization records, and high-level website usage data through our hosting and analytics services.

How we use information

We use information to:

create, verify, secure, and support your account;
connect, synchronize, organize, search, and display your context;
provide AI-assisted responses you specifically request;
administer trials, complimentary access, subscriptions, and billing;
send transactional messages such as verification and reset emails;
detect abuse, diagnose failures, maintain reliability, and improve CX; and
comply with law and enforce our Terms of Service.

We do not sell connected email or calendar information, and we do not use that information for advertising.

Google and Microsoft connected data

A provider connection is optional and begins only after you complete that provider's authorization screen. CX requests read-only Gmail, Google Calendar, Microsoft Mail, and Microsoft Calendar permissions for the connected workspace. With those permissions, CX cannot send, delete, move, or edit provider mail or calendar events.

Provider access and refresh credentials are stored separately from your CX sign-in and encrypted using authenticated encryption. We use provider webhooks and change cursors to learn when a permitted resource should be synchronized, and the source provider remains authoritative.

Google API Limited Use

CX's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. CX does not use Google user data to serve advertisements or to train generalized AI or machine learning models.

AI-assisted features

When you invoke the CX Operator, CX sends your prompt and the object or context you selected—including its title, optional summary, and listed relationships—to our configured AI gateway and model provider to generate a response. The current request flow does not automatically send your entire mailbox or calendar with every prompt.

AI providers process that request to return the feature you asked for and are service providers or independent providers under their applicable agreements. CX is designed to present proposed consequential actions for your review rather than claiming that an external change has already occurred.

Retention and deletion

We generally keep account and workspace information while your account is active and for as long as needed to provide CX, resolve disputes, secure the service, meet legal obligations, and maintain legitimate business records. Billing records may be retained for tax, accounting, fraud, and chargeback requirements even after access ends.

Synchronized mail and calendar records remain in your CX workspace until they are deleted through an account-data deletion process or are removed under an applicable service-maintenance rule. Revoking CX in Google or Microsoft stops future authorized access but does not, by itself, erase information already synchronized into CX.

Short-lived operational data is kept for shorter periods: processed webhook and queue events are generally scheduled for deletion after about seven days, completed synchronization runs after about thirty days, and AI rate-limit counters after about two days. Security incidents, failed events, or legal holds can require longer retention. Where backups exist, deleted data may remain until those backups rotate and will not be restored for ordinary product use.

CX does not yet offer a self-service account-deletion control. To request deletion of your account and synchronized data, email hello@jbr.cx from your account email. We may need to verify your identity before completing the request.

Your choices and rights

Connections: You can revoke CX from your Google or Microsoft account's security and permissions settings at any time.
Account data: You may ask to access, correct, export, or delete information associated with your account.
Billing: You may manage or cancel a paid subscription through the Stripe billing portal made available in CX.
Legal rights: Depending on where you live, you may also have rights to restrict or object to processing or to appeal a decision.

Send a request to hello@jbr.cx. We may verify your identity and authority, and applicable law can permit or require us to retain certain information.

Security and international processing

We use administrative, technical, and organizational safeguards designed for the sensitivity of the information we process. Current measures include access controls, scoped provider permissions, encrypted provider credentials, origin checks for sensitive actions, and rate limiting. No storage or transmission method is completely secure, so we cannot guarantee absolute security.

CX and its providers may process information in the United States and other places where they operate. Those locations may have data-protection rules different from those where you live.

Children

CX is not directed to children under 18, and we do not knowingly collect their personal information. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate.

Changes to this policy

We may update this policy as CX changes. We will post the revised policy here and change the date above. If an update materially changes how we handle personal information, we will provide additional notice when reasonably appropriate.

Contact

Questions, privacy requests, and account-deletion requests can be sent to hello@jbr.cx.